Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Scripts associated with public folders must be prevented from execution in Outlook.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-223348 | O365-OU-000003 | SV-223348r879630_rule | Medium |
| Description |
|---|
| This policy setting controls whether Outlook executes scripts that are associated with custom forms or folder home pages for public folders. |
| STIG | Date |
|---|---|
| Microsoft Office 365 ProPlus Security Technical Implementation Guide | 2023-08-31 |
Details
| Check Text ( C-25021r744256_chk ) |
|---|
| Verify the policy for Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for public folders is set to "Enabled". Use the Windows Registry to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\outlook\security If the value for publicfolderscript is set to REG_DWORD = 0, this is not a finding. |
| Fix Text (F-25009r442264_fix) |
|---|
| Set the policy for User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Outlook Options >> Other >> Advanced >> Do not allow Outlook object model scripts to run for public folders to "Enabled". |